--- title: SonicWall SMA1000 zero-days hit CISA KEV, Windows... description: Two actively exploited SonicWall SMA1000 zero-days — one a CVSS 10.0 unauthenticated SSRF — are being chained for full network compromise, with a CISA... canonical: https://daily.dev/posts/sonicwall-sma1000-zero-days-hit-cisa-kev-windows-privilege-escalation-poc-drops-on-patch-day-kk2q2inx3 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: SonicWall SMA1000 zero-days hit CISA KEV, Windows privilege escalation PoC drops on patch day | daily.dev og:description: Two actively exploited SonicWall SMA1000 zero-days — one a CVSS 10.0 unauthenticated SSRF — are being chained for full network compromise, with a CISA... og:url: https://daily.dev/posts/sonicwall-sma1000-zero-days-hit-cisa-kev-windows-privilege-escalation-poc-drops-on-patch-day-kk2q2inx3 og:image: https://api.daily.dev/og/posts/kk2q2iNX3.png og:image:alt: SonicWall SMA1000 zero-days hit CISA KEV, Windows privilege escalation PoC drops on patch day og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SonicWall SMA1000 zero-days hit CISA KEV, Windows privilege escalation PoC drops on patch day **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 0 upvotes · 1 comments ## Summary Two actively exploited SonicWall SMA1000 zero-days — one a CVSS 10.0 unauthenticated SSRF — are being chained for full network compromise, with a CISA remediation deadline of July 17. A Windows User Profile Service privilege escalation PoC landed the same day as Microsoft's record patch drop, drawing an emergency out-of-band fix for CVE-2026-50656. OpenAI's internal red-teaming model GPT-Red cracked over 90% of attacks against GPT-5 and discovered a novel 'fake chain of thought' injection class. Multiple Claude integration vulnerabilities surfaced this week, from a URI-based prompt injection in Claude Desktop to unpatched Chrome extension flaws and a Slack access model that makes channel membership an IAM boundary. ## Content **TLDR:** Two actively exploited SonicWall SMA1000 zero-days — one a CVSS 10.0 unauthenticated SSRF — are being chained for full network compromise, with a CISA remediation deadline of July 17. A Windows User Profile Service privilege escalation PoC landed the same day as Microsoft's record patch drop, drawing an emergency out-of-band fix for CVE-2026-50656. OpenAI's internal red-teaming model GPT-Red cracked over 90% of attacks against GPT-5 and discovered a novel 'fake chain of thought' injection class. Multiple Claude integration vulnerabilities surfaced this week, from a URI-based prompt injection in Claude Desktop to unpatched Chrome extension flaws and a Slack access model that makes channel membership an IAM boundary. --- ## SonicWall SMA1000 CVE-2026-15409 (CVSS 10.0) and CVE-2026-15410 chained for unauthenticated RCE, CISA deadline July 17 Rapid7's MDR team found and disclosed two zero-days in SonicWall SMA1000 remote access appliances that are being actively exploited. CVE-2026-15409 is an unauthenticated SSRF in the Workplace interface that tunnels traffic to arbitrary localhost services via a websocket proxy — no credentials needed. CVE-2026-15410 is a path traversal in the Appliance Management Console that escalates to root. Chained together, attackers are using the SSRF for initial access, then harvesting credentials, stealing MFA seeds, and pivoting into Active Directory through the compromised box. Affected firmware: 12.4.3 and 12.5.0 on SMA1000 models 6210, 7210, and 8200v. No workarounds exist — patch immediately. Rapid7 has published IOCs, log patterns, and attacker IP ranges. [Read more](https://daily.dev/posts/5MEAOVd0l) ## Windows CVE-2026-50656 (CVSS 7.8) PoC drops on patch day, Microsoft issues emergency out-of-band fix An anonymous researcher published a working privilege escalation exploit targeting the Windows User Profile Service on the same day Microsoft shipped its record 570-patch drop. The exploit, called HiveLegacy or LegacyHive, lets a low-privilege account modify an administrator's classes registry hive to reach SYSTEM. Microsoft responded with an emergency patch for CVE-2026-50656, branded RoguePlanet, which also affects Windows Defender. Whether it's been exploited in the wild is contested — Microsoft says no, Qualys reported active attacks. The PoC requires local access and was intentionally stripped down, so weaponizing it takes real skill, but the capabilities it unlocks — credential dumping, security product tampering, persistence — are genuinely useful post-compromise. Apply the Malware Protection Engine update and watch for privilege escalation indicators. [Read more](https://daily.dev/posts/iiAt3klmB) ## OpenAI's GPT-Red cracks 90%+ of attacks against GPT-5, discovers 'fake chain of thought' injection class OpenAI built GPT-Red, an internal red-teaming model trained via self-play to find prompt injection vulnerabilities at scale. It succeeded on 84% of attacks versus 13% for human red-teamers, and cracked over 90% of its strongest attacks against GPT-5. Against GPT-5.6, hardened using adversarial training with GPT-Red, that number dropped below 23%. The most interesting finding is a novel attack class called 'fake chain of thought' — planting false information inside a model's working memory so it acts on spoofed reasoning it believes it generated itself. GPT-Red still struggles with multi-turn attacks and image-embedded instructions. OpenAI won't release it publicly, citing compute cost and the obvious offensive capability concern. [Read more](https://daily.dev/feed-by-ids?id=Ct4S2wnAu&id=ILMTLtr3d) ## Claude Desktop URI injection, Chrome extension flaws, and Slack access model all surface in the same week Three separate Claude integration vulnerabilities landed this week. Oasis Security found 'PromptFiction' in Claude Desktop: a crafted claude:// URI submits a malicious prompt with no user interaction beyond a single click, and when chained with prior flaws enables file read/write and RCE — patched in version 1.1.2321. Manifold Security found two unpatched bugs in Claude for Chrome (version 1.0.80): a click handler that doesn't verify event.isTrusted, enabling synthetic clicks to read Gmail and Docs, and a ?skipPermissions=true URL parameter creating a latent privileged mode. Tenable Research analyzed Claude Tag in Slack and found that Slack channel membership is now effectively an IAM boundary — whoever can join a channel can use whatever credentials that channel's access bundle holds, with no per-user OAuth. [Read more](https://daily.dev/feed-by-ids?id=X10WwiTXh&id=1TFozhYjc&id=voYn4yGwb&id=TAv8VGkbg) --- ## Also notable - **Decidim Ruby gems: five CVEs patched in versions 0.30.9, 0.31.5, and 0.32.0, including CVSS 8.5 JWT replay:** A coordinated audit by Radically Open Security found five vulnerabilities in Decidim's Ruby gems: a CVSS 8.5 JWT that can be replayed across organizations to access admin GraphQL fields and participant PII, a CVSS 7.5 unauthenticated identity document download via long-lived Active Storage URLs, an SSRF via push subscription endpoints, a stored XSS in HTML content blocks, and a CSV census authorization bypass — all patched in 0.30.9, 0.31.5, and 0.32.0. [Read more](https://daily.dev/feed-by-ids?id=xbeidGUK2&id=s7DUGjY6j&id=2AbQUb7mp&id=K0pjlILgZ&id=rvwoZ14g2&id=aEwCqn8UL&id=BPUKlfZ8A&id=SYxarSevH&id=84T1yHZON) - **Two Joomla extension zero-days (CVSS 10.0) under active mass exploitation before patches shipped:** CISA added CVE-2026-48939 (iCagenda) and CVE-2026-56291 (Balbooa Forms) to its KEV catalog — both unauthenticated file upload flaws enabling RCE, both exploited by automated scanners within hours of discovery; patches are iCagenda 4.0.8/3.9.15 and Balbooa Forms 2.4.1, with a three-day federal remediation deadline. [Read more](https://daily.dev/posts/4DAXgFZgy) - **Iran used SS7 and commercial ad-ID data to geolocate US military personnel in the Middle East, resulting in troop injuries:** Iranian operators combined SS7 location queries against 2G/3G infrastructure with commercial advertising identifier data to track US military personnel and contractors in Iraq and Bahrain — neither technique required zero-days, and the campaign resulted in injuries according to officials cited by the Financial Times. [Read more](https://daily.dev/posts/BYuhO5irI) - **Microsoft making passkeys default in Entra ID September 2026, SMS/voice auth retired February 1, 2027:** Starting September 1, 2026, Entra ID users on SMS or voice MFA will be auto-enrolled into passkeys during their next sign-in; Microsoft-provided SMS and voice authentication is fully retired February 1, 2027 with no opt-out, and organizations needing phone-based auth must configure third-party telecom providers through the Microsoft Security Store. [Read more](https://daily.dev/posts/fmZXnXctR) - **Harden-Runner v2.20.0 adds egress block mode for macOS and Windows GitHub-hosted runners:** Previously Linux-only, Harden-Runner's active egress blocking now covers macOS runners holding Apple signing certificates and Windows runners managing code signing credentials — both high-value supply chain targets — with the recommended workflow being audit mode first, then switch to block mode after reviewing the auto-generated policy. [Read more](https://daily.dev/feed-by-ids?id=oVmu1YWaB&id=X6JaTli6z) ## Similar posts on daily.dev - [CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs](https://daily.dev/posts/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs-x9e9rvfsr) · BleepingComputer · 0 upvotes · 0 comments - [Another bad week for SonicWall as SMA 1000 0-day exploited](https://daily.dev/posts/another-bad-week-for-sonicwall-as-sma-1000-0-day-exploited-vbcm0llpl) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#windows](https://daily.dev/tags/windows), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/sonicwall-sma1000-zero-days-hit-cisa-kev-windows-privilege-escalation-poc-drops-on-patch-day-kk2q2inx3) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/sonicwall-sma1000-zero-days-hit-cisa-kev-windows-privilege-escalation-poc-drops-on-patch-day-kk2q2inx3","headline":"SonicWall SMA1000 zero-days hit CISA KEV, Windows privilege escalation PoC drops on patch day","text":"Two actively exploited SonicWall SMA1000 zero-days — one a CVSS 10.0 unauthenticated SSRF — are being chained for full network compromise, with a CISA remediation deadline of July 17. A Windows User Profile Service privilege escalation PoC landed the same day as Microsoft's record patch drop, drawing an emergency out-of-band fix for CVE-2026-50656. OpenAI's internal red-teaming model GPT-Red cracked over 90% of attacks against GPT-5 and discovered a novel 'fake chain of thought' injection class. Multiple Claude integration vulnerabilities surfaced this week, from a URI-based prompt injection in Claude Desktop to unpatched Chrome extension flaws and a Slack access model that makes channel membership an IAM boundary.","url":"https://daily.dev/posts/sonicwall-sma1000-zero-days-hit-cisa-kev-windows-privilege-escalation-poc-drops-on-patch-day-kk2q2inx3","datePublished":"2026-07-16T04:18:12.154Z","dateModified":"2026-09-13T21:11:21.136Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"SonicWall SMA1000 zero-days hit CISA KEV, Windows privilege escalation PoC drops on patch day"}]} ```